Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: psi-probe-rest

com.github.psi-probe:psi-probe-rest:5.4.1-SNAPSHOT

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
accessors-smart-2.6.0.jar pkg:maven/net.minidev/accessors-smart@2.6.0   0 43
angus-activation-2.0.3.jar pkg:maven/org.eclipse.angus/angus-activation@2.0.3   0 35
asm-9.7.1.jar pkg:maven/org.ow2.asm/asm@9.7.1   0 54
commons-logging-1.4.0.jar pkg:maven/commons-logging/commons-logging@1.4.0   0 129
error_prone_annotations-2.50.0.jar pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0   0 29
j2objc-annotations-3.1.jar pkg:maven/com.google.j2objc/j2objc-annotations@3.1   0 33
jakarta.activation-api-2.1.4.jar pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4   0 45
json-path-3.0.0.jar cpe:2.3:a:json-path:jayway_jsonpath:3.0.0:*:*:*:*:*:*:* pkg:maven/com.jayway.jsonpath/json-path@3.0.0   0 Highest 34
json-smart-2.6.0.jar cpe:2.3:a:json-smart_project:json-smart:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:json-smart_project:json-smart-v2:2.6.0:*:*:*:*:*:*:*
pkg:maven/net.minidev/json-smart@2.6.0   0 Highest 51
jspecify-1.0.0.jar pkg:maven/org.jspecify/jspecify@1.0.0   0 32
jsr305-3.0.2.jar pkg:maven/com.google.code.findbugs/jsr305@3.0.2   0 17
micrometer-commons-1.16.7.jar pkg:maven/io.micrometer/micrometer-commons@1.16.7   0 69
micrometer-observation-1.16.7.jar pkg:maven/io.micrometer/micrometer-observation@1.16.7   0 69
modernizer-maven-annotations-3.5.0.jar pkg:maven/org.gaul/modernizer-maven-annotations@3.5.0   0 19
slf4j-api-2.0.19.jar pkg:maven/org.slf4j/slf4j-api@2.0.19   0 29
spotbugs-annotations-4.10.4.jar pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4   0 53
spring-core-7.0.9.jar cpe:2.3:a:pivotal_software:spring_framework:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:7.0.9:*:*:*:*:*:*:*
pkg:maven/org.springframework/spring-core@7.0.9   0 Highest 41
spring-hateoas-3.1.2.jar cpe:2.3:a:vmware:spring_hateoas:3.1.2:*:*:*:*:*:*:* pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2   0 Highest 46
spring-plugin-core-4.1.0.jar pkg:maven/org.springframework.plugin/spring-plugin-core@4.1.0   0 42

Dependencies (vulnerable)

accessors-smart-2.6.0.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.6.0/accessors-smart-2.6.0.jar
MD5: 0ad72639eea293193f68898da9b0b902
SHA1: 2d96f1d9b6ab7f13261aa81b15703574185747a0
SHA256:222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61
Referenced In Project/Scope: psi-probe-rest:compile
accessors-smart-2.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/net.minidev/json-smart@2.6.0

Identifiers

  • pkg:maven/net.minidev/accessors-smart@2.6.0   (Confidence:High)

angus-activation-2.0.3.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar
MD5: ad20392145690b36b4f950fe31a31a2a
SHA1: 7f80607ea5014fef0b1779e6c33d63a88a45a563
SHA256:a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7
Referenced In Project/Scope: psi-probe-rest:compile
angus-activation-2.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/org.eclipse.angus/angus-activation@2.0.3   (Confidence:High)

asm-9.7.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar
MD5: e2cdd32d198ad31427d298eee9d39d8d
SHA1: f0ed132a49244b042cd0e15702ab9f2ce3cc8436
SHA256:8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281
Referenced In Project/Scope: psi-probe-rest:compile
asm-9.7.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/net.minidev/json-smart@2.6.0

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.7.1   (Confidence:High)

commons-logging-1.4.0.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.4.0/commons-logging-1.4.0.jar
MD5: 954e27d33e55e587a4694d5952a0c5c6
SHA1: e8f6313365dfa0580e49c58837afc8caa9b4ce05
SHA256:d175dbd751dd782a63bde28c7a039520e971f25e84b79c19b8435edc3603e0dc
Referenced In Project/Scope: psi-probe-rest:compile
commons-logging-1.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/commons-logging/commons-logging@1.4.0   (Confidence:High)

error_prone_annotations-2.50.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.50.0/error_prone_annotations-2.50.0.jar
MD5: 1ded1848cfd4f5167e00824faf9c4d3b
SHA1: 74ba43e49ab1184d41634af2ef0047e82c4064b0
SHA256:4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a
Referenced In Project/Scope: psi-probe-rest:provided
error_prone_annotations-2.50.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0   (Confidence:High)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.
  

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: psi-probe-rest:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1   (Confidence:High)

jakarta.activation-api-2.1.4.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar
MD5: bc1602eee7bc61a0b86f14bbbb0cc794
SHA1: 9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8
SHA256:c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004
Referenced In Project/Scope: psi-probe-rest:compile
jakarta.activation-api-2.1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4   (Confidence:High)

json-path-3.0.0.jar

Description:

A library to query and verify JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/3.0.0/json-path-3.0.0.jar
MD5: 2ab4381a6e940ad027e976902fc42474
SHA1: 053913e54e804386c8e375e567410bb2c86666ad
SHA256:e4e49440701674ace75af44a98840d9e13f53b34aab280446707661318405dc8
Referenced In Project/Scope: psi-probe-rest:compile
json-path-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

json-smart-2.6.0.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.6.0/json-smart-2.6.0.jar
MD5: fde8981f31c3b972355a5adf26a9ec65
SHA1: 5f858a43a325a8673da6869ab2bc787a1bcb2244
SHA256:1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b
Referenced In Project/Scope: psi-probe-rest:compile
json-smart-2.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: psi-probe-rest:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0   (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-rest:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2   (Confidence:High)

micrometer-commons-1.16.7.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.16.7/micrometer-commons-1.16.7.jar
MD5: 952b8470311050de186bed6c354dadea
SHA1: ed85a2983e52358be84a6c8c3522b968ff41e500
SHA256:cd1ad64a94650a2ed3988a4ab48c9a7fad40c4986a81e328194dd757b5170273
Referenced In Project/Scope: psi-probe-rest:compile
micrometer-commons-1.16.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

  • pkg:maven/io.micrometer/micrometer-commons@1.16.7   (Confidence:High)

micrometer-observation-1.16.7.jar

Description:

Module containing Observation related code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.16.7/micrometer-observation-1.16.7.jar
MD5: ff4722ca94dde41f70801dbdf5f77c9b
SHA1: 5387e97e74b61892affb7c4b4cafa9df6d6ca6d2
SHA256:74f9e4d51ef30c141de8a2409879282e572eef98665e033e8922c2fbee16862d
Referenced In Project/Scope: psi-probe-rest:compile
micrometer-observation-1.16.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

  • pkg:maven/io.micrometer/micrometer-observation@1.16.7   (Confidence:High)

modernizer-maven-annotations-3.5.0.jar

File Path: /home/runner/.m2/repository/org/gaul/modernizer-maven-annotations/3.5.0/modernizer-maven-annotations-3.5.0.jar
MD5: 3bd3749d84e7bdcc0a731ab0316e8f77
SHA1: 7f7144a4cf519f13cf6a35f1e16852cfeed04b16
SHA256:765e234f875e80f725fb8724a7f7268df426d3fd35368ae5a5fa503e48f9e7f5
Referenced In Project/Scope: psi-probe-rest:provided
modernizer-maven-annotations-3.5.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.5.0   (Confidence:High)

slf4j-api-2.0.19.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.19/slf4j-api-2.0.19.jar
MD5: 1ca3a2acac3d5947b37d9b5536c55829
SHA1: efad9817997b3a6ce9e058f92e612917a744c290
SHA256:e91ff6d720609e7a194ffe758c3ed5c84e798617ae07b0a0f6a4fe229741b4bb
Referenced In Project/Scope: psi-probe-rest:compile
slf4j-api-2.0.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.19   (Confidence:High)

spotbugs-annotations-4.10.4.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.10.4/spotbugs-annotations-4.10.4.jar
MD5: 472925cb4e5451c8f7a1aeeefe286622
SHA1: 7eb4c58212378becfb6ea6d236ec24a2352a316e
SHA256:28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
Referenced In Project/Scope: psi-probe-rest:provided
spotbugs-annotations-4.10.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4   (Confidence:High)

spring-core-7.0.9.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.9/spring-core-7.0.9.jar
MD5: f87ba857b1fb00b125568d966aa66058
SHA1: e03c619fc5b26931973277f5ba65ae47967a20e3
SHA256:5195f4722699b39878d99a832549fe65df2890b159d063b88fff31b1ca65ae36
Referenced In Project/Scope: psi-probe-rest:compile
spring-core-7.0.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

spring-hateoas-3.1.2.jar

Description:

Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/3.1.2/spring-hateoas-3.1.2.jar
MD5: b6edafa946c34fae4ab9f90f6e0471e8
SHA1: 0078f12e09d4050f6d2224346841fe1c0dbc2d7e
SHA256:7d5fb2f00f856465486e9367c2d33373f32cfac90b21a2c1151a28022705e840
Referenced In Project/Scope: psi-probe-rest:compile
spring-hateoas-3.1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.4.1-SNAPSHOT

Identifiers

spring-plugin-core-4.1.0.jar

Description:

Core plugin infrastructure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/4.1.0/spring-plugin-core-4.1.0.jar
MD5: 4f594ebd9908b2ede14b854ef189ca72
SHA1: 3eac8574979ecfbcaca747835d3b1bbd86368bbe
SHA256:7e48dac2e47dded5e6fa2cdf37786c5ba3f09dcf44000770e4513a47e63da6fe
Referenced In Project/Scope: psi-probe-rest:compile
spring-plugin-core-4.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.2

Identifiers

  • pkg:maven/org.springframework.plugin/spring-plugin-core@4.1.0   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype Guide OSS Index API.